** Description changed: - - SRU Justification - - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The v3.19.8-ckt16 upstream stable - patch set is now available. It should be included in the Ubuntu - kernel as well. - - git://kernel.ubuntu.com/ubuntu/linux.git - - TEST CASE: TBD - - The following patches from the v3.19.8-ckt16 stable release shall + SRU Justification + + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The v3.19.8-ckt16 upstream stable + patch set is now available. It should be included in the Ubuntu + kernel as well. + + git://kernel.ubuntu.com/ubuntu/linux.git + + TEST CASE: TBD + + The following patches from the v3.19.8-ckt16 stable release shall be applied: + + Linux 3.19.8-ckt16 + pipe: limit the per-user amount of pages allocated in pipes + [media] exynos4-is: fix a format string bug + MAINTAINERS: Remove stale entry for BCM33xx chips + s390/stacktrace: fix address ranges for asynchronous and panic stack + ARM: dts: kirkwood: use unique machine name for ds112 + netlink: not trim skb for mmaped socket when dump + net: phy: bcm7xxx: Fix 40nm EPHY features + net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS + net: phy: fix PHY_RUNNING in phy_state_machine + net: phy: Fix phy_mac_interrupt() + af_unix: Don't set err in unix_stream_read_generic unless there was an error + s390/perf_event: fix address range for asynchronous stack + s390/oprofile: fix address range for asynchronous stack + net: phy: bcm7xxx: Fix bcm7xxx_config_init() check + net: phy: bcm7xxx: Fix shadow mode 2 disabling + sctp: Fix port hash table size computation + unix_diag: fix incorrect sign extension in unix_lookup_by_ino + rtnl: RTM_GETNETCONF: fix wrong return value + route: check and remove route cache when we get route + pppoe: fix reference counting in PPPoE proxy + net/mlx4_en: Avoid changing dev->features directly in run-time + net/mlx4_en: Choose time-stamping shift value according to HW frequency + net/mlx4_en: Count HW buffer overrun only once + qmi_wwan: add "4G LTE usb-modem U901" + af_unix: Guard against other == sk in unix_dgram_sendmsg + ipv4: fix memory leaks in ip_cmsg_send() callers + bonding: Fix ARP monitor validation + net: Copy inner L3 and L4 headers as unaligned on GRE TEB + flow_dissector: Fix unaligned access in __skb_flow_dissector when used by eth_get_headlen + sctp: translate network order to host order when users get a hmacid + tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs + net:Add sysctl_max_skb_frags + unix: correctly track in-flight fds in sending process user_struct + ipv6: fix a lockdep splat + ipv6: addrconf: Fix recursive spin lock call + net/ipv6: add sysctl option accept_ra_min_hop_limit + ipv6/udp: use sticky pktinfo egress ifindex on connect() + sctp: allow setting SCTP_SACK_IMMEDIATELY by the application + pptp: fix illegal memory access caused by multiple bind()s + af_unix: fix struct pid memory leak + tcp: fix NULL deref in tcp_v4_send_ack() + net: dp83640: Fix tx timestamp overflow handling. + af_iucv: Validate socket address length in iucv_sock_bind() + target: Fix race with SCF_SEND_DELAYED_TAS handling + target: Fix remote-port TMR ABORT + se_cmd fabric stop + target: Fix TAS handling for multi-session se_node_acls + target: Fix LUN_RESET active I/O handling for ACK_KREF + target: Remove first argument of target_{get,put}_sess_cmd() + target: Remove the unused flag SCF_ACK_KREF + do_last(): don't let a bogus return value from ->open() et.al. to confuse us + hpfs: don't truncate the file when delete fails + mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED + x86/mpx: Fix off-by-one comparison with nr_registers + ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2 + KVM: x86: MMU: fix ubsan index-out-of-range warning + ALSA: hda - Fixing background noise on Dell Inspiron 3162 + libceph: use the right footer size when skipping a message + libceph: don't bail early from try_read() when skipping a message + tracing: Fix showing function event in available_events + KVM: async_pf: do not warn on page allocation failures + KVM: arm/arm64: vgic: Ensure bitmaps are long enough + sunrpc/cache: fix off-by-one in qword_get() + s390/compat: correct restore of high gprs on signal return + can: ems_usb: Fix possible tx overflow + drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE + kernel/resource.c: fix muxed resource handling in __request_region() + ext4: fix crashes in dioread_nolock mode + ext4: fix bh->b_state corruption + hwmon: (ads1015) Handle negative conversion values correctly + USB: option: add "4G LTE usb-modem U901" + USB: cp210x: add IDs for GE B650V3 and B850V3 boards + USB: option: add support for SIM7100E + ALSA: pcm: Fix rwsem deadlock for non-atomic PCM stream + NFSv4: Fix a dentry leak on alias use + usb: dwc3: Fix assignment of EP transfer resources + drm: Fix treatment of drm_vblank_offdelay in drm_vblank_on() (v2) + drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command + drm/radeon: use post-decrement in error handling + ALSA: seq: Fix double port list deletion + tracing: Fix freak link error caused by branch tracer + tracepoints: Do not trace when cpu is offline + dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer + ALSA: hda - Cancel probe work instead of flush at remove + ALSA: seq: Fix leak of pool buffer at concurrent writes + ALSA: seq: Drop superfluous error/debug messages after malloc failures + xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted. + xen/pciback: Save the number of MSI-X entries to be copied later. + xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY + iwlwifi: mvm: don't allow sched scans without matches to be started + bio: return EINTR if copying to user space got interrupted + ext4: don't read blocks from disk after extents being swapped + ext4: fix potential integer overflow + scsi: fix soft lockup in scsi_remove_target() on module removal + irqchip/gic-v3-its: Fix double ICC_EOIR write for LPI in EOImode==1 + btrfs: properly set the termination value of ctx->pos in readdir + ARM: 8519/1: ICST: try other dividends than 1 + s390/dasd: fix refcount for PAV reassignment + s390/dasd: prevent incorrect length error under z/VM after PAV changes + cifs: fix erroneous return value + drm/radeon: hold reference to fences in radeon_sa_bo_new + workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup + ahci: Intel DNV device IDs SATA + drm/i915: fix error path in intel_setup_gmbus() + drm/i915/skl: Don't skip mst encoders in skl_ddi_pll_select() + phy: twl4030-usb: Relase usb phy on unload + phy: core: fix wrong err handle for phy_power_on + phy: core: Fixup return value of phy_exit when !pm_runtime_enabled + ALSA: timer: Fix race at concurrent reads + ALSA: timer: Fix race between stop and interrupt + nfs: fix nfs_size_to_loff_t + xen/scsiback: correct frontend counting + ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz() + ALSA: timer: Fix wrong instance passed to slave callbacks + powerpc: Fix dedotify for binutils >= 2.26 + drm/i915/dsi: don't pass arbitrary data to sideband + drm/i915/dsi: defend gpio table against out of bounds access + ALSA: dummy: Implement timer backend switching more safely + klist: fix starting point removed bug in klist iterators + ALSA: hda - Fix speaker output from VAIO AiO machines + pty: make sure super_block is still valid in final /dev/tty close + pty: fix possible use after free of tty->driver_data + serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485) + qla2xxx: Fix stale pointer access. + crypto: atmel-sha - fix atmel_sha_remove() + crypto: user - lock crypto_alg_list on alg dump + radix-tree: fix oops after radix_tree_iter_retry + mm: replace vma_lock_anon_vma with anon_vma_lock_read/write + ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup + mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress + dump_stack: avoid potential deadlocks + Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo" + ALSA: hda - Fix static checker warning in patch_hdmi.c + drm/dp/mst: deallocate payload on port destruction + drm/dp/mst: Reverse order of MST enable and clearing VC payload table. + drm/dp/mst: Calculate MST PBN with 31.32 fixed point + drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil + drm: fix missing reference counting decrease + SCSI: Add Marvell Console to VPD blacklist + scsi_dh_rdac: always retry MODE SELECT on command lock violation + Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl + ARM: nomadik: fix up SD/MMC DT settings + [media] saa7134-alsa: Only frees registered sound cards + ALSA: timer: Fix leftover link at closing + [media] tda1004x: only update the frontend properties if locked + target: Fix LUN_RESET active TMR descriptor handling + xhci: Fix list corruption in urb dequeue at host removal + usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms + radix-tree: fix race in gang lookup + drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration + ALSA: seq: Fix lockdep warnings due to double mutex locks + ALSA: rawmidi: Fix race at copying & updating the position + ALSA: rawmidi: Make snd_rawmidi_transmit() race-free + ALSA: hda - Add fixup for Mac Mini 7,1 model + module: wrapper for symbol name. + ASoC: dpcm: fix the BE state on hw_free + drm/radeon: mask out WC from BO on unsupported arches + drm: add helper to check for wc memory support + cputime: Prevent 32bit overflow in time[val|spec]_to_cputime() + MIPS: Fix buffer overflow in syscall_get_arguments() + libata: fix sff host state machine locking while polling + ALSA: timer: Fix link corruption due to double start or stop + ALSA: timer: Code cleanup + ALSA: seq: Fix yet another races among ALSA timer accesses + ALSA: pcm: Fix potential deadlock in OSS emulation + ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check + ALSA: seq: Fix race at closing in virmidi driver + intel_scu_ipcutil: underflow in scu_reg_access() + iio: pressure: mpl115: fix temperature offset sign + iio: inkern: fix a NULL dereference on error + crypto: algif_hash - wait for crypto_ahash_init() to complete + target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors + ALSA: usb-audio: Add native DSD support for PS Audio NuWave DAC + ALSA: usb-audio: Fix OPPO HA-1 vendor ID + drm/i915/dp: fall back to 18 bpp when sink capability is unknown + crypto: shash - Fix has_key setting + ARM: dts: at91: sama5d4: fix instance id of DBGU + rfkill: fix rfkill_fop_read wait_event usage + mac80211: Requeue work after scan complete for all VIF types. + libata: disable forced PORTS_IMPL for >= AHCI 1.3 + PCI/AER: Flush workqueue on device remove to avoid use-after-free + cgroup: make sure a parent css isn't offlined before its children + ASoC: rt5645: fix the shift bit of IN1 boost + iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG + iio: dac: mcp4725: set iio name property in sysfs + iio: add HAS_IOMEM dependency to VF610_ADC + x86/entry/compat: Add missing CLAC to entry_INT80_32 + EVM: Use crypto_memneq() for digest comparisons + iw_cxgb3: Fix incorrectly returning error on success
** Changed in: linux (Ubuntu Vivid) Status: New => Fix Committed ** Changed in: linux (Ubuntu Vivid) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1556297 Title: Vivid update to v3.19.8-ckt16 stable release Status in linux package in Ubuntu: New Status in linux source package in Vivid: Fix Committed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The v3.19.8-ckt16 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well. git://kernel.ubuntu.com/ubuntu/linux.git TEST CASE: TBD The following patches from the v3.19.8-ckt16 stable release shall be applied: Linux 3.19.8-ckt16 pipe: limit the per-user amount of pages allocated in pipes [media] exynos4-is: fix a format string bug MAINTAINERS: Remove stale entry for BCM33xx chips s390/stacktrace: fix address ranges for asynchronous and panic stack ARM: dts: kirkwood: use unique machine name for ds112 netlink: not trim skb for mmaped socket when dump net: phy: bcm7xxx: Fix 40nm EPHY features net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS net: phy: fix PHY_RUNNING in phy_state_machine net: phy: Fix phy_mac_interrupt() af_unix: Don't set err in unix_stream_read_generic unless there was an error s390/perf_event: fix address range for asynchronous stack s390/oprofile: fix address range for asynchronous stack net: phy: bcm7xxx: Fix bcm7xxx_config_init() check net: phy: bcm7xxx: Fix shadow mode 2 disabling sctp: Fix port hash table size computation unix_diag: fix incorrect sign extension in unix_lookup_by_ino rtnl: RTM_GETNETCONF: fix wrong return value route: check and remove route cache when we get route pppoe: fix reference counting in PPPoE proxy net/mlx4_en: Avoid changing dev->features directly in run-time net/mlx4_en: Choose time-stamping shift value according to HW frequency net/mlx4_en: Count HW buffer overrun only once qmi_wwan: add "4G LTE usb-modem U901" af_unix: Guard against other == sk in unix_dgram_sendmsg ipv4: fix memory leaks in ip_cmsg_send() callers bonding: Fix ARP monitor validation net: Copy inner L3 and L4 headers as unaligned on GRE TEB flow_dissector: Fix unaligned access in __skb_flow_dissector when used by eth_get_headlen sctp: translate network order to host order when users get a hmacid tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs net:Add sysctl_max_skb_frags unix: correctly track in-flight fds in sending process user_struct ipv6: fix a lockdep splat ipv6: addrconf: Fix recursive spin lock call net/ipv6: add sysctl option accept_ra_min_hop_limit ipv6/udp: use sticky pktinfo egress ifindex on connect() sctp: allow setting SCTP_SACK_IMMEDIATELY by the application pptp: fix illegal memory access caused by multiple bind()s af_unix: fix struct pid memory leak tcp: fix NULL deref in tcp_v4_send_ack() net: dp83640: Fix tx timestamp overflow handling. af_iucv: Validate socket address length in iucv_sock_bind() target: Fix race with SCF_SEND_DELAYED_TAS handling target: Fix remote-port TMR ABORT + se_cmd fabric stop target: Fix TAS handling for multi-session se_node_acls target: Fix LUN_RESET active I/O handling for ACK_KREF target: Remove first argument of target_{get,put}_sess_cmd() target: Remove the unused flag SCF_ACK_KREF do_last(): don't let a bogus return value from ->open() et.al. to confuse us hpfs: don't truncate the file when delete fails mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED x86/mpx: Fix off-by-one comparison with nr_registers ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2 KVM: x86: MMU: fix ubsan index-out-of-range warning ALSA: hda - Fixing background noise on Dell Inspiron 3162 libceph: use the right footer size when skipping a message libceph: don't bail early from try_read() when skipping a message tracing: Fix showing function event in available_events KVM: async_pf: do not warn on page allocation failures KVM: arm/arm64: vgic: Ensure bitmaps are long enough sunrpc/cache: fix off-by-one in qword_get() s390/compat: correct restore of high gprs on signal return can: ems_usb: Fix possible tx overflow drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE kernel/resource.c: fix muxed resource handling in __request_region() ext4: fix crashes in dioread_nolock mode ext4: fix bh->b_state corruption hwmon: (ads1015) Handle negative conversion values correctly USB: option: add "4G LTE usb-modem U901" USB: cp210x: add IDs for GE B650V3 and B850V3 boards USB: option: add support for SIM7100E ALSA: pcm: Fix rwsem deadlock for non-atomic PCM stream NFSv4: Fix a dentry leak on alias use usb: dwc3: Fix assignment of EP transfer resources drm: Fix treatment of drm_vblank_offdelay in drm_vblank_on() (v2) drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command drm/radeon: use post-decrement in error handling ALSA: seq: Fix double port list deletion tracing: Fix freak link error caused by branch tracer tracepoints: Do not trace when cpu is offline dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer ALSA: hda - Cancel probe work instead of flush at remove ALSA: seq: Fix leak of pool buffer at concurrent writes ALSA: seq: Drop superfluous error/debug messages after malloc failures xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted. xen/pciback: Save the number of MSI-X entries to be copied later. xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY iwlwifi: mvm: don't allow sched scans without matches to be started bio: return EINTR if copying to user space got interrupted ext4: don't read blocks from disk after extents being swapped ext4: fix potential integer overflow scsi: fix soft lockup in scsi_remove_target() on module removal irqchip/gic-v3-its: Fix double ICC_EOIR write for LPI in EOImode==1 btrfs: properly set the termination value of ctx->pos in readdir ARM: 8519/1: ICST: try other dividends than 1 s390/dasd: fix refcount for PAV reassignment s390/dasd: prevent incorrect length error under z/VM after PAV changes cifs: fix erroneous return value drm/radeon: hold reference to fences in radeon_sa_bo_new workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup ahci: Intel DNV device IDs SATA drm/i915: fix error path in intel_setup_gmbus() drm/i915/skl: Don't skip mst encoders in skl_ddi_pll_select() phy: twl4030-usb: Relase usb phy on unload phy: core: fix wrong err handle for phy_power_on phy: core: Fixup return value of phy_exit when !pm_runtime_enabled ALSA: timer: Fix race at concurrent reads ALSA: timer: Fix race between stop and interrupt nfs: fix nfs_size_to_loff_t xen/scsiback: correct frontend counting ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz() ALSA: timer: Fix wrong instance passed to slave callbacks powerpc: Fix dedotify for binutils >= 2.26 drm/i915/dsi: don't pass arbitrary data to sideband drm/i915/dsi: defend gpio table against out of bounds access ALSA: dummy: Implement timer backend switching more safely klist: fix starting point removed bug in klist iterators ALSA: hda - Fix speaker output from VAIO AiO machines pty: make sure super_block is still valid in final /dev/tty close pty: fix possible use after free of tty->driver_data serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485) qla2xxx: Fix stale pointer access. crypto: atmel-sha - fix atmel_sha_remove() crypto: user - lock crypto_alg_list on alg dump radix-tree: fix oops after radix_tree_iter_retry mm: replace vma_lock_anon_vma with anon_vma_lock_read/write ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress dump_stack: avoid potential deadlocks Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo" ALSA: hda - Fix static checker warning in patch_hdmi.c drm/dp/mst: deallocate payload on port destruction drm/dp/mst: Reverse order of MST enable and clearing VC payload table. drm/dp/mst: Calculate MST PBN with 31.32 fixed point drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil drm: fix missing reference counting decrease SCSI: Add Marvell Console to VPD blacklist scsi_dh_rdac: always retry MODE SELECT on command lock violation Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl ARM: nomadik: fix up SD/MMC DT settings [media] saa7134-alsa: Only frees registered sound cards ALSA: timer: Fix leftover link at closing [media] tda1004x: only update the frontend properties if locked target: Fix LUN_RESET active TMR descriptor handling xhci: Fix list corruption in urb dequeue at host removal usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms radix-tree: fix race in gang lookup drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration ALSA: seq: Fix lockdep warnings due to double mutex locks ALSA: rawmidi: Fix race at copying & updating the position ALSA: rawmidi: Make snd_rawmidi_transmit() race-free ALSA: hda - Add fixup for Mac Mini 7,1 model module: wrapper for symbol name. ASoC: dpcm: fix the BE state on hw_free drm/radeon: mask out WC from BO on unsupported arches drm: add helper to check for wc memory support cputime: Prevent 32bit overflow in time[val|spec]_to_cputime() MIPS: Fix buffer overflow in syscall_get_arguments() libata: fix sff host state machine locking while polling ALSA: timer: Fix link corruption due to double start or stop ALSA: timer: Code cleanup ALSA: seq: Fix yet another races among ALSA timer accesses ALSA: pcm: Fix potential deadlock in OSS emulation ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check ALSA: seq: Fix race at closing in virmidi driver intel_scu_ipcutil: underflow in scu_reg_access() iio: pressure: mpl115: fix temperature offset sign iio: inkern: fix a NULL dereference on error crypto: algif_hash - wait for crypto_ahash_init() to complete target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors ALSA: usb-audio: Add native DSD support for PS Audio NuWave DAC ALSA: usb-audio: Fix OPPO HA-1 vendor ID drm/i915/dp: fall back to 18 bpp when sink capability is unknown crypto: shash - Fix has_key setting ARM: dts: at91: sama5d4: fix instance id of DBGU rfkill: fix rfkill_fop_read wait_event usage mac80211: Requeue work after scan complete for all VIF types. libata: disable forced PORTS_IMPL for >= AHCI 1.3 PCI/AER: Flush workqueue on device remove to avoid use-after-free cgroup: make sure a parent css isn't offlined before its children ASoC: rt5645: fix the shift bit of IN1 boost iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG iio: dac: mcp4725: set iio name property in sysfs iio: add HAS_IOMEM dependency to VF610_ADC x86/entry/compat: Add missing CLAC to entry_INT80_32 EVM: Use crypto_memneq() for digest comparisons iw_cxgb3: Fix incorrectly returning error on success To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1556297/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp